« Volver al listado

CVE-2013-4427

Estado: ModificadaBaja (2.1)—

pyxtrlock before 0.2 does not properly check the return values of the (1) xcb_grab_pointer and (2) xcb_grab_keyboard XCB library functions, which allows physically proximate attackers to gain access to the keyboard or mouse without unlocking the screen via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Leon Weber — Pyxtrlock

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-4427",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-05-19T14:55:07.347",
  "references": [
    {
      "url": "http://www.openwall.com/lists/oss-security/2013/09/25/16",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2013/10/16/8",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://github.com/leonnnn/pyxtrlock/blob/master/CHANGELOG",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2013/09/25/16",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2013/10/16/8",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/leonnnn/pyxtrlock/blob/master/CHANGELOG",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "pyxtrlock before 0.2 does not properly check the return values of the (1) xcb_grab_pointer and (2) xcb_grab_keyboard XCB library functions, which allows physically proximate attackers to gain access to the keyboard or mouse without unlocking the screen via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "pyxtrlock anterior a 0.2 no comprueba debidamente los valores de retorno de las funciones de libraría XCB (1) xcb_grab_pointer y (2) xcb_grab_keyboard, lo que permite a atacantes físicamente próximos ganar acceso al teclado o ratón sin desbloquear la pantalla a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-16T23:57:12.657",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:leon_weber:pyxtrlock:*:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "07DCEEC5-84B4-4D47-A897-2486DA1A5B58",
              "versionEndIncluding": "0.1"
            },
            {
              "criteria": "cpe:2.3:a:leon_weber:pyxtrlock:0.1:beta:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1885456C-AF75-499E-9F50-D70889C0F8DE"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}